Privacy Policy
1. What we collect
Kit & Mirror uses your front camera to:
- capture a selfie photo when you run a face scan, and
- show a live camera feed with on-device face tracking during mirror coaching — that live feed is never recorded, saved, or sent anywhere.
We also store the makeup products you add to your bag, locally on your device.
2. Face & selfie data — what happens when you scan
When you tap "Scan my face," the selfie photo you take is sent to OpenAI, our third-party AI provider (openai.com), together with the names of the products already in your bag.
What is sent
The selfie photo, and a text list of your bag's product categories/names. No other personal data (name, email, location) is included in this request.
Who it is sent to, and why
OpenAI, for two purposes only:
- Routine generation — OpenAI's Chat Completions API (vision) analyzes the selfie and writes a personalized makeup routine using only products from your bag.
- Look preview — OpenAI's Images API edits the selfie into a photoreal preview of the finished look, preserving your identity, skin tone, and features.
Kit & Mirror has no backend server of its own — the photo travels directly from your device to OpenAI over an encrypted (HTTPS) connection and is never stored on infrastructure we operate.
Storage location & retention
The photo is processed on OpenAI's servers. OpenAI does not use data submitted through its API to train its models. OpenAI retains the photo and the associated request for up to 30 days for abuse and safety monitoring, then deletes it, unless a longer retention period is required by law. See OpenAI's own terms at openai.com/policies/api-data-usage-policies.
We do not share your selfie with any other third party, and we never sell it.
3. Your consent
Before your very first selfie is sent to OpenAI, the app shows an in-app disclosure explaining exactly what is sent and to whom, and asks you to explicitly agree before continuing. If you decline, face scans are disabled, but the rest of Kit & Mirror — your bag and the look library — still works normally. You can review what is shared or withdraw your consent at any time from Settings → AI & Selfie Data inside the app.
4. Purchases
Subscriptions are processed by Apple or Google. We receive purchase status through RevenueCat, our subscription management platform, using an anonymous purchase identifier to unlock Pro features. RevenueCat does not receive your name, email, or selfies from us. We do not store your full payment card details.
5. Data retention & deletion
- Bag items & scan history — stored only on your device. Delete a bag item any time in the app; uninstalling Kit & Mirror removes all local data.
- Selfie photos — never stored on our servers, because we don't operate any. OpenAI's retention window (up to 30 days, described above) is the only place a submitted photo briefly exists off your device.
- Deletion requests — to request early deletion of a photo already processed by OpenAI, or with any other privacy question, email us below and we will help you submit the request to OpenAI.
6. Third parties we use
- OpenAI — face-routine analysis and look-preview generation from your selfie.
- RevenueCat — subscription and purchase management.
- Apple / Google — payment processing for subscriptions.
We do not use advertising or analytics SDKs that track you across other apps or websites, and we do not sell personal data.
7. Children's privacy
Kit & Mirror is not directed at children and we do not knowingly collect data from children. The app carries a general-audience age rating.
8. Changes to this policy
If we change how we collect, use, or share data — including face/selfie data — we will update this page and, where the change is material, notify you in the app before it takes effect.
9. Contact
Questions about privacy, or to request deletion of your data: [email protected]